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Notice of Allowability 


Application No. 

10/734,028 


Applicant(s) 
DILLAWAYET AL. 


Examiner 

CARLTON V. JOHNSON 


Art Unit 

2436 





~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . This communication is responsive to 4-5-2010 . 

2. The allowed claim(s) is/are 2-4,7-12, 14,16, 18-21,23,25-33,36-38 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1. 84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . □ Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. □ Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 

/Carlton V. Johnson/ 
Examiner, Art Unit 2436 



5. □ Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. ^ Examiner's Amendment/Comment 

8. ^ Examiner's Statement of Reasons for Allowance 

9. □ Other . 



Notice of Allowability 



Part of Paper No./Mail Date 20100505 
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EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Joseph F. Oriti Registration No. 47,835 on May 6, 2010. 

The application has been amended as follows: 

Claim 31 has been amended as follows: 

31 . (Currently Amended) A method of establishing trust between two computer 
entities, the method comprising: 

the first computer entity seeking a granting of trust from the server bv sending an 
inquiry in the form of a can-attest message to the server, the can-attest message stating 
that the first computer entity can send an attestation message but that the first computer 
entity would like to know from the server whether such an attestation message is 
required, and if so any requirements that such server has with regard to such attestation 
message; 

the server sending an attestation-wanted message to the first computer entity in 
response to the can-attest message, the attestation-wanted message stating that the 
server does in fact require an attestation message from the first computer entity and 
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that the attestation message as sent by the first computer entity must adhere to certain 
requirements as defined in such attestation-wanted message: 

transmitting an attestation message from a first computer entity to a second 
computer entity, the attestation message including a code identifier (code ID) 
associated with the first computer entity that is calculated by using a security ID 
associated with the first computer entity and corresponding to a behavior parameter that 
is associated with a computing operation having security implications; 

ensuring that the security ID corresponding to the behavior parameter has not 
been tampered with, by verifying the validity of the code ID in the second computer 
entity, the verifying comprising determining that the first computer entity is not included 
in a do-not-trust list; aft4 

transmitting a trust message from the second computer entity to the first 
computer entity upon successfully verifying the validity of the code ID, the trust 
message including a first secret that is shared between the first and the second 
computer entities for communicating securely over a first period of time, wherein the first 
period of time is determined by the second computer entity, and 

the security ID including security information relating to the first computer entity, 
the security information being expressed as a number of name-value security attribute 
parameters, the first computer entity being an executable and referring to the 
parameters in the security information in the security ID to determine whether particular 
security behavior is allowed, the code identifier (code ID) being representative of the 
first computer entity and calculated as a one-way hash of a combination of the 
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executable of the first computer entity and the security ID so that modification of the 
security information in the security ID causes the calculated code ID to change and the 
second computer entity can interpret the change as an indication that the first computer 
entity should not be trusted. 

Allowable Subject Matter 

The following is an examiner's statement of reasons for allowance. 

Claims 30, 31 are allowed based on the following: 

The prior art of record, considered individually or in combination, fails to fairly 
show or suggest: the first computer entity seeking a granting of trust from the server by 
sending an inquiry in the form of a can-attest message to the server, the can-attest 
message stating thai the first computer entity can send an attestation message but that 
the first computer entity would like to know from the server whether such an attestation 
message is required, and if so any requirements that such server has with regard to 
such attestation message; and the server sending an attestation-wanted message to 
the first computer entity in response to the can-attest message, the attestation-wanted 
message stating that the server does in fact require an attestation message from the 
first computer entity and that the attestation message as sent by the first computer 
entity must adhere to certain requirements as defined in such attestation-wanted 
message, in addition to the other limitations in a manner as recited in claims 2 -4, 7 - 12, 
14,18,18-21,23, 25-33, 30-38. 
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Claims 19 - 21, 23, 25 - 29, 37, 38 are allowed due to allowed base claim 30. 
Claims 2 -4, 7 - 12, 14, 16, 18, 32, 33, 38 are allowed due to allowed base claim 31. 

So as indicated by the above statements, Applicant's arguments have been 
considered persuasive, in light of the set of claims with limitations as well as the 
enabling portions of the specification. The dependent claims further limit the 
independent claims and are considered allowable on the same basis as the 
independent claims as well as for the further limitations set forth. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Nasser Moazzami/ Carlton V. Johnson 

Supervisory Patent Examiner, Art Unit 2436 Examiner 

Art Unit 2436 



CVJ 

April 26, 2010 



